HP HP0-A116 - HP ArcSight ESM 6.5 Security Administrator and Analyst Exam
Page: 3 / 36
Total 179 questions
Question #11 (Topic: )
What does Partition Archiving allow you to specify?
A. the number of partitions to keep offline
B. the number of partitions that remain online
C. the compression ratio to be used in partitioning
D. the amount of data to store in a partition
Answer: A
Question #12 (Topic: )
What are the three general types of Data Monitors?
A. event-based, correlation, and non-event based
B. event-based, correlation, and aggregation matching
C. event-based, matching conditions and non-event based
D. event-based, event graph, and non-event based
Answer: C
Question #13 (Topic: )
How are baselines established and used in Query Viewers?
A. Baselines are created using rules. After the rule is triggered, the resulting action establishes a baseline against which future rules are evaluated in the Query Viewer.
B. Baselines are created using query results. The baseline from the query is used to create a new field set definition that can be run against future events.
C. Baselines are created using query results. When a query has one or more baselines available, you can compare the current results with the baseline.
D. Baselines are created using query results and fed into the Image Editor for the related Data Monitor.
Answer: C
Question #14 (Topic: )
ESM components fail to consistently restart after a system reboot and require individual
intervention with repeated arcsight_services component restart commands. Which log file
offers troubleshooting information that will help resolve this issue?
intervention with repeated arcsight_services component restart commands. Which log file
offers troubleshooting information that will help resolve this issue?
A. monit.log
B. server.log
C. arcsight_services.log
D. server.status.log
Answer: A
Question #15 (Topic: )
What happens if a notification requiring a response within 24 hours is not acknowledged
within that time?
within that time?
A. The notification is escalated to the next level of notification.
B. The notification is added to the Session List.
C. An error message appears on the ArcSight Console.
D. The condition generating the notification is escalated to a higher priority.
Answer: A
